This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File:                     WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier:          /1Q9GYarjM6uzcOW3el5JXXc6N2RJL+Hh4RdJD1DGJo=
Subject key identifier:   87:EE:C5:8A:56:9D:3D:0E:74:CB:86:28:30:C8:92:8F:F7:41:87:C6
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer:       /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial:       019B3042FF9ED146913126FE948A9CE30899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number:          0E2D
Signing time:             Thu 18 Dec 2025 07:00:55 +0000
Manifest this update:     Thu 18 Dec 2025 07:00:55 +0000
Manifest next update:     Fri 19 Dec 2025 07:00:55 +0000
Files and hashes:         1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
                          2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: 1R4vB66UnFLhqtsd5Z8hCSH49nX/n74dsQ6bNEAoiJ4=)
                          3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:42:ff:9e:d1:46:91:31:26:fe:94:8a:9c:e3:08:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
        Validity
            Not Before: Dec 18 07:00:55 2025 GMT
            Not After : Dec 19 07:00:55 2025 GMT
        Subject: CN=87eec58a569d3d0e74cb862830c8928ff74187c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:cd:06:0b:17:a1:b9:a3:db:36:b6:53:93:
                    26:dd:22:6a:48:4f:3d:dc:9a:ca:52:3c:20:7b:9e:
                    8e:0c:25:e1:d3:f6:1a:66:46:0d:44:83:5e:13:f9:
                    bd:20:3d:ad:55:64:cb:eb:0c:1c:78:de:06:e6:ae:
                    82:bf:07:b2:57:44:c7:ec:4a:c4:90:5c:ae:38:89:
                    89:bd:0e:48:41:56:0c:a5:1e:7c:ed:cb:bb:86:10:
                    de:40:61:20:ba:be:55:40:d9:c6:3a:20:5a:7f:b3:
                    07:79:50:cc:ea:58:49:39:15:8c:e2:45:32:33:a5:
                    63:9c:c8:49:b6:c7:3f:2e:ed:e1:5d:25:c7:c6:d9:
                    4c:6e:38:fb:5a:99:cf:b6:24:59:62:25:c7:98:92:
                    81:6a:d6:23:20:0a:98:6f:72:e1:bd:67:7f:f5:7c:
                    c3:57:f4:d5:44:f4:3b:ff:fc:36:e4:71:a9:2b:f2:
                    68:68:05:f3:b8:ef:65:ad:22:2e:e8:f8:0f:37:4c:
                    10:a2:43:88:9e:57:a2:4a:94:a7:21:5f:46:a9:96:
                    9f:5e:c7:bf:60:2e:4d:f2:b6:d0:ce:10:42:ee:36:
                    f1:31:80:6f:53:68:b0:d6:36:ce:59:f5:e8:f2:7d:
                    0e:ff:12:b0:f4:bc:c0:03:27:58:2a:b1:13:ba:30:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EE:C5:8A:56:9D:3D:0E:74:CB:86:28:30:C8:92:8F:F7:41:87:C6
            X509v3 Authority Key Identifier:
                keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e9:7b:83:09:a8:00:89:45:23:33:00:cb:5d:9d:ae:69:7e:
         ea:1a:7b:e5:b2:b2:9f:02:da:f6:7c:e6:2f:b3:6e:ef:e3:07:
         e4:dc:e4:72:21:29:1d:c6:aa:65:0e:22:c6:fe:70:a0:68:cf:
         2a:95:4a:46:02:c7:73:25:38:37:83:2b:86:dd:c7:7b:7c:70:
         de:49:d5:77:3a:f3:64:e0:4b:17:89:03:dc:54:3e:cf:c9:aa:
         4f:dc:1f:61:13:f8:ca:ef:28:b5:0e:6b:20:c3:59:18:e6:56:
         52:a3:59:9d:58:e6:62:20:65:cd:09:23:26:f1:46:8a:86:84:
         d1:ef:64:2b:eb:c3:c1:f5:f0:d2:bc:48:4b:e2:90:a3:0b:12:
         38:09:be:01:ce:7a:8d:3b:9b:5e:c2:93:0d:18:78:80:38:28:
         d8:04:99:e4:66:c3:c8:d1:d1:28:77:ce:8a:8a:ec:b0:e5:85:
         88:56:08:00:b7:4f:64:0a:3d:55:70:02:12:ea:4d:18:37:0a:
         d3:c8:b3:7a:bb:de:1b:52:9c:dc:c0:12:75:33:83:a1:3a:02:
         8b:7e:a3:b8:f3:2c:41:21:e1:cc:7f:9f:61:10:5a:cb:f3:b6:
         ee:0c:b1:26:74:60:9f:47:fd:9a:6c:38:d8:1e:35:a5:15:46:
         f3:b7:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:14:06 2025 by rpki-client